Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: PixelYourSite Component: Product Catalog Feed Clear all filters
TI-2023-01696 CVE-2023-1804 · GHSA-8gj6-vrp5-c3p9

Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS

Priority MEDIUM 60

The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the edit parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00519 Published 2023-05-02 Fixed in 2.1.1 CWE-79
TI-2023-01697 CVE-2023-1805 · GHSA-34vm-8hc8-fc49

Product Catalog Feed by PixelYourSite < 2.1.1 - Reflected XSS

Priority MEDIUM 60

The Product Catalog Feed by PixelYourSite WordPress plugin before 2.1.1 does not sanitise and escape the page parameter before outputting it back in an attribute, leading to a Reflected Cross-Site Scripting which could b…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00458 Published 2023-05-02 Fixed in 2.1.1 CWE-79